Commit Graph

515 Commits (9c227e2c361af7a1aa0d8b5fcbf7103038ed3272)

Author SHA1 Message Date
Michael Zalimeni b1b05f0bac
[NET-4703] Prevent partial application of Envoy extensions (#18068)
1 year ago
cui fliter 18a5edd232
docs: Fix some comments (#17118)
1 year ago
Dan Stough 8e3a1ddeb6
[OSS] Improve xDS Code Coverage - Endpoints and Misc (#18222)
1 year ago
Dan Stough 2793761702
[OSS] Improve xDS Code Coverage - Clusters (#18165)
1 year ago
Blake Covarrubias 2c5a09bb0a
Explicitly enable WebSocket upgrades (#18150)
1 year ago
Ronald 18bc04165c
Improve XDS test coverage: JWT auth edition (#18183)
1 year ago
Dan Stough 33d898b857
[OSS] test: improve xDS listener code coverage (#18138)
1 year ago
Ronald bcc6a9d752
Use JWT-auth filter in metadata mode & Delegate validation to RBAC filter (#18062)
1 year ago
Ronald ada3938115
Add first integration test for jwt auth with intention (#18005)
1 year ago
Ronald 80394278b8
Expose JWKS cluster config through JWTProviderConfigEntry (#17978)
1 year ago
Chris S. Kim 50a9d1b696
Remove POC code (#17974)
1 year ago
Ronald 1512ea307e
Dynamically create jwks clusters for jwt-providers (#17944)
1 year ago
Chris Thain 366bd6f89f
ext-authz Envoy extension: support `localhost` as a valid target URI. (#17821)
1 year ago
Eric Haberkorn a3ba559149
Make locality aware routing xDS changes (#17826)
1 year ago
Paul Glass d2363eb711
Test permissive mTLS filter chain not configured with tproxy disabled (#17747)
1 year ago
Chris Thain 9289e680d6
OSS merge: Update error handling login when applying extensions (#17740)
1 year ago
Chris Thain a8f1350835
ENT merge of ext-authz extension updates (#17684)
1 year ago
Nathan Coleman 1074252361
api-gateway: stop adding all header filters to virtual host when generating xDS (#17644)
1 year ago
Eric Haberkorn 779647b948
Add Envoy and Consul version constraints to Envoy extensions (#17612)
1 year ago
Matt Keeler 77f44fa878
Various bits of cleanup detected when using Go Workspaces (#17462)
2 years ago
Michael Zalimeni ad03a5d0f2
Avoid panic applying TProxy Envoy extensions (#17537)
2 years ago
Eric Haberkorn d99312b86e
Add Upstream Service Targeting to Property Override Extension (#17517)
2 years ago
Ronald 55e283dda9
[NET-3092] JWT Verify claims handling (#17452)
2 years ago
Chris Thain 65b8ccdc1b
Enable Network filters for Wasm Envoy Extension (#17505)
2 years ago
Michael Zalimeni e1df0f28bd
Support `Listener` and `ClusterLoadAssignment` in `property-override` (#17497)
2 years ago
Michael Zalimeni 5a46a8c604
Add `builtin/property-override` Envoy Extension (#17487)
2 years ago
Chris Thain 516eb4febc
Add `builtin/ext-authz` Envoy Extension (#17495)
2 years ago
Eric Haberkorn 17a280d51b
This fixes an issue where TCP services that are exported cannot be configured to failover. (#17469)
2 years ago
sarahalsmiller b147323fb0
xds: Remove APIGateway ToIngress function (#17453)
2 years ago
sarahalsmiller 6d35edc21c
xds: generate routes directly from API gateway snapshot (#17392)
2 years ago
Paul Glass 07ff9d3d64
Use original_dst filter instead of use_original_dst field (#17433)
2 years ago
Ronald ddb25cec0e
[NET-3092] Improve jwt-provider tests (#17430)
2 years ago
Dan Stough d935c7b466
[OSS] gRPC Blocking Queries (#17426)
2 years ago
Michael Zalimeni b8d2640429
Disable remote proxy patching except AWS Lambda (#17415)
2 years ago
sarahalsmiller e2a81aa8bd
xds: generate listeners directly from API gateway snapshot (#17398)
2 years ago
sarahalsmiller d34bde0e4e
xds: generate clusters directly from API gateway snapshot (#17391)
2 years ago
Ronald 113202d541
JWT Authentication with service intentions: xds package update (#17414)
2 years ago
sarahalsmiller 134aac7c26
xds: generate endpoints directly from API gateway snapshot (#17390)
2 years ago
Kyle Havlovitz 2904d0a431
Pull virtual IPs for filter chains from discovery chains (#17375)
2 years ago
Connor 0789661ce5
Rename hcp-metrics-collector to consul-telemetry-collector (#17327)
2 years ago
Chris Thain b9102c295d
Add Network Filter Support for Envoy Extensions (#17325)
2 years ago
Freddy 7c3e9cd862
Hash namespace+proxy ID when creating socket path (#17204)
2 years ago
Eric Haberkorn 2c0da88ce7
fix panic in `injectSANMatcher` when `tlsContext` is `nil` (#17185)
2 years ago
Semir Patel 5eaeb7b8e5
Support Envoy's MaxEjectionPercent and BaseEjectionTime config entries for passive health checks (#15979)
2 years ago
Eric Haberkorn b1fae05983
Add sameness groups to service intentions. (#17064)
2 years ago
hashicorp-copywrite[bot] 9f81fc01e9
[COMPLIANCE] Add Copyright and License Headers (#16854)
2 years ago
Paul Glass 77ecff3209
Permissive mTLS (#17035)
2 years ago
Chris Thain 175bb1a303
Wasm Envoy HTTP extension (#16877)
2 years ago
Eric Haberkorn 0d1d2fc4c9
add order by locality failover to Consul enterprise (#16791)
2 years ago
Ronald 94ec4eb2f4
copyright headers for agent folder (#16704)
2 years ago